Ransomware Solutions Consulting Experts

Progent's Ransomware Negotiation Consulting in Wichita
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complex activity that requires a mix of field experience, IT knowledge and business acumen. It also calls for close co-operation with the cyber-extortion target's IT team and the cyber insurance provider, if any. Because the number one priority of the ransomware target is operational continuity, it is critical to establish response groups that operate effectively, concurrently, and in close communication. Progent has the scope of IT knowledge and the deep bench of personnel to supplement your IT support team and restore your network environment quickly and affordably.

Support offered by Progent's ransomware settlement negotiation team include:

• Establishing the kind of ransomware used in the assault
• Identifying and contacting the hacker persona
• Assessing the likelihood of recovery
• Testing the hacker's decryption tool
• Deciding on an acceptable settlement amount with the ransomware victim and the insurance provider
• Establishing a settlement amount and timeline with the TA
• Checking compliance with anti-money laundering sanctions
• Managing the crypto-currency transfer to the TA
• Acquiring, reviewing, and operating the hacker's decryption tool
• If needed, contacting the hacker for technical help with the decryption tool

• Quarantining affected endpoints to prevent further progress of the attack
• Making digital copies of every breached server and endpoint and data store in order to perform forensics without interfering with cleanup
• Installing A/V protection to all virus-free endpoints
• Restoring files from air-gapped restores or uncompromised machines
• Building a pristine environment
• Mapping and connecting datastores to reflect exactly their pre-encryption state

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption tool, current strains of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim often try to exfiltrate information. TAs can then demand a separate ransom for not posting this information on the dark web. Sadly, there is no method to guarantee that stolen files have been totally deleted by the TA. In fact, in many cases the hacker has limited control about the disposition of the data. Settling an exfiltration ransom does not free you from the need for engaging the guidance of privacy lawyers, performing an investigation into which data were compromised, and performing the required alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and on-premises network services throughout the United States for over 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes consultants who have been awarded high-level certifications in core technology platforms including Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications including CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning application software. This broad array of skills gives Progent the ability to identify and integrate the surviving pieces of your network following a ransomware attack and reconstruct them quickly into an operational system. Progent has worked with leading insurance carriers including Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Expertise in Wichita
To get in touch with Progent about ransomware settlement negotiation guidance in Wichita, call Progent at 800-462-8800 or go to Contact Progent.